Organization and Management System (Org)
IOSA Checklist
ORGANIZATION AND MANAGEMENT SYSTEM (ORG)Applicability
Section 1 addresses the organization and management system of an operator for the purpose of ensuring the safety and security of aircraft operations.
Individual provisions or sub-specifications within a provision that:
- Begin with a conditional phrase ("If the Operator...") are applicable if the operator meets the condition(s) stated in the phrase.
- Do not begin with a conditional phrase are applicable to all operators unless determined otherwise by the Auditor.
Definitions of technical terms used in this ISM Section 1, as well as the meaning of abbreviations and acronyms, are found in the IATA Reference Manual for Audit Programs (IRM).
General Guidance
Definitions of technical terms used in this ISM Section 1, as well as the meaning of abbreviations and acronyms, are found in the IATA Reference Manual for Audit Programs (IRM).
Management and Control
ORG 1.1.1 The Operator shall have a management system that has continuity throughout the organization and ensures control of operations and management of safety and security outcomes. (GM) >
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
Refer to the IRM for the definitions of Operations, Operator, Safety (Operational), Security (Aviation) and State.
A management system is documented in controlled company media at both the corporate and operational levels. Manuals or controlled electronic media are acceptable means of documenting the management system.
Documentation provides a comprehensive description of the scope, structure and functionality of the management system and depicts lines of accountability throughout the organization, as well as authorities, duties, responsibilities and the interrelation of functions and activities within the system for ensuring safe and secure operations.
Acceptable means of documentation include, but are not limited to, organograms (organization charts), job descriptions and other descriptive written material that define and clearly delineate the management system.
Documentation also reflects a functional continuity within the management system that ensures the entire organization works as a system and not as a group of independent or fragmented units (i.e., silo effect).
An effective management system is fully implemented and functional with a clear consistency and unity of purpose between corporate management and management in the operational areas.
The management system ensures compliance with all applicable standards and regulatory requirements. In addition to internal standards and regulations of the State, an operator may also be required to comply with authorities that have jurisdiction over operations that are conducted over the high seas or within a foreign country.
ORG 1.1.2 The Operator shall have designated senior officials within the management system that have the responsibility, and thus are accountable for ensuring, within all operational areas:
i) The allocation of resources necessary to manage safety risks and security threats to aircraft operations;
ii) Operations are conducted in accordance with conditions and restrictions of the Air Operator Certificate (AOC), and in compliance with applicable regulations and standards of the Operator. (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
Refer to the IRM for the definitions of Accountability, Aircraft Operations, Responsibility, Safety Risk Management and Senior Management.
With an assignment of responsibility, attendant authority and financial control are typically necessary in order to make policy decisions, provide adequate resources, resolve safety and security issues and ensure the necessary system components are in place and functioning properly.
In addition to being in compliance with conditions and restrictions specified in the AOC, as well as requirements of applicable authorities (i.e. regulations), and operator is expected to be in compliance with its own policies and procedures, which may exceed existing regulations or address areas that are not regulated (e.g. ground handling operations). An operator's policies and procedures are typically published in its Operations Manual (OM).
Acceptable means of documenting accountability include, but are not limited to, organization charts (organograms), job descriptions, corporate by-laws and any other descriptive written material that defines and clearly indicates the lines of operational accountability from the corporate level of management to front line operations.
ORG 1.1.3 If required by the State, the Operator shall have one senior official within the management system that is designated as the Accountable Executive who:
i) Has the authority to ensure the allocation of resources necessary to manage safety risks and security threats to aircraft operations;
ii) Has overall responsibility and is accountable for ensuring operations are conducted in accordance with conditions and restrictions of the Air Operator Certificate (AOC), and in compliance with applicable regulations and standards of the Operator. (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
Refer to the IRM for the definitions of Accountable Executive and Authority.
Accountable Executive is a generic management title; such senior official may also be known as the chief executive officer, accountable manager or other similar title depending on the regulatory jurisdiction.
The Accountable Executive has the authority, which typically includes financial control, to make policy decisions, provide adequate resources, resolve operational quality, safety and security issues and, in general, ensure necessary system components are in place and functioning properly.
ORG 1.1.4 If required by the State, the Operator shall have nominated officials within the management system that are acceptable to the Authority and have the responsibility, and thus are accountable, for ensuring, in their respective defined operational areas:
i) The management of safety risks and security threats to aircraft operations;
ii) Operations are conducted in accordance with conditions and restrictions of the Air Operator Certificate (AOC), and in compliance with applicable regulations and standards of the Operator. (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
Refer to the IRM for the definition Post Holder.
In certain regulatory jurisdictions such nominated officials may be called post holders or directors.
ORG 1.1.10 The Operator should have a safety management system (SMS) that is implemented and integrated throughout the organization to address the safety of aircraft operations. [SMS] (GM)
Note: Conformity with this provision is possible only when the Operator has achieved conformity with all standards and recommended practices that are identified by the [SMS] symbol.
Documented and Implemented (Conformity)
Documented not Implemented (Observation)
Implemented not Documented (Observation)
Not Documented not Implemented (Observation)
N/A
Auditor Comments:
Refer to the IRM for the definitions of Safety Management System (SMS) and State Safety Program (SSP).
IOSA specifications for SMS are derived from the international standards and recommended practices published by ICAO in Annex 6 to the Convention on International Civil Aviation (ICAO Annex 6), Appendix 7, Framework for Safety Management Systems (SMS).
Where applicable, an SMS is designed and implemented in accordance with the State Safety Program (SSP). The manner in which the elements of SMS are implemented typically reflects the size and complexity of the operator’s organization.
In general, an SMS is designed and implemented to:
- Identify safety hazards in operations;
- Ensure remedial action is implemented to control safety risks;
- Provide for ongoing monitoring and assessment of safety performance;
- Make continual improvement to the level of safety in operations.
The specific requirements for each operator’s SMS will normally be found in the regulations associated with the SSP. In addition, states would typically publish guidance designed to assist operators in the implementation of SMS.
A description of an operator’s SMS is contained in documentation as specified in ORG 2.1.5.
Expanded guidance may be found in the ICAO Safety Management Manual.
ORG 1.1.11 The Operator should have an accountable executive who, irrespective of other functions, has ultimate responsibility and accountability on behalf of the Operator for the implementation and maintenance of the SMS throughout the organization. [SMS]
Documented and Implemented (Conformity)
Documented not Implemented (Observation)
Implemented not Documented (Observation)
Not Documented not Implemented (Observation)
N/A
Auditor Comments:
The requirement for an accountable executive is an element of the Safety Accountabilities component of the SMS framework.
In an SMS, the accountable executive would typically have:
- Ultimate responsibility and accountability, on behalf of the operator, for the safety of the entire operation together with the implementation and maintenance of the SMS;
- Responsibility for ensuring the SMS is properly implemented in all areas of the organization and performing in accordance with specified requirements.
Expanded guidance may be found in the ICAO SMM.
ORG 1.1.12 The Operator should have a designated manager that is responsible for the day-to-day administration and oversight of SMS operation throughout the organization on behalf of the Accountable Executive and senior management. [SMS] (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Observation)
Implemented not Documented (Observation)
Not Documented not Implemented (Observation)
N/A
Auditor Comments:
The requirement for a manager that focuses on the administration and oversight of the SMS on behalf of the accountable executive is an element of the Safety Accountabilities component of the SMS framework.
The individual assigned responsibility for organizational implementation of an SMS is ideally a senior management official that reports to the accountable executive. Also, depending on the size, structure and scope of an operator’s organization, such individual may be assigned functions in addition to those associated with the SMS manager position.
The title assigned to the designated manager will vary for each organization. Regardless of title, the manager is the designated organizational focal point for the day-to-day development, administration and maintenance of the SMS (i.e. functions as the SMS champion). It is important that such manager has the necessary degree of authority when coordinating and addressing safety matters throughout the organization.
Whereas the designated manager has responsibility for day-to-day oversight of the SMS, overall accountability for organizational safety rests with the accountable executive. Likewise, nominated officials (refer to ORG 1.1.4) or operational managers always retain the responsibility (and thus are accountable) for ensuring safety in their respective areas of operations.
Expanded guidance may be found in the ICAO SMM.
ORG 1.2.1 The Operator shall have a corporate safety policy that:
i) Reflects the organizational commitment regarding safety;
ii) Includes a statement about the provision of the necessary resources for the implementation of the safety policy;
iii) Is communicated throughout the organization. [SMS] (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
The requirement for an operator to have a defined safety policy is an element of the Safety Policy and Objectives component of the SMS framework.
The safety policy typically also reflects the commitment of senior management to:
- Compliance with applicable regulations and standards of the Operator;
- Ensuring the management of safety risks to aircraft operations;
- The promotion of safety awareness;
- Continual improvement of operational performance.
The safety policy is typically reviewed periodically to ensure continued relevance to the organization.
Such policy might be documented in the operations manual or other controlled document, and, to enhance effectiveness, is communicated and made visible throughout the organization through dissemination of communiqués, posters, banners and other forms of information in a form and language which can be easily understood. To ensure continuing relevance, the corporate policy is normally reviewed for possible update a minimum of every two years.
Consistent with the structure and complexity of the operator's organization, the corporate safety policy may be issued as a stand-alone policy or combined with either or both of the policies specified in ORG 1.2.2 and ORG 1.2.3.
Expanded guidance may be found in the ICAO SMM.
ORG 1.2.2 The Operator shall have a corporate policy that states the commitment of the organization to continual improvement of the management system. (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
The policy of an operator reflects the commitment of senior management to ensure measuring and evaluating on a continuing basis, and making changes that improve the management system and the culture. Ideas for improvement may come from internal and external sources; therefore the organization would be constantly monitoring all sources and willing to make changes as necessary to keep the management system refreshed and strongly focused on improving operational safety and security performance.
Such policy typically commits the organization to:
- Regular review of performance-based indicators by senior management;
- Regular analysis of malfunctions or undesirable operational results;
- Follow-up of corrective actions and their effectiveness in improving operational performance.
The continual improvement policy is typically reviewed periodically to ensure continuing relevance to the organization.
An SMS, as well as a Security Management System (SMS), are unique components of an operator's overall management system and, if implemented, would typically be subjected to protocols for continual improvement in accordance with the operator's policy.
A continual improvement policy is normally documented in operations manuals or other controlled documents and, to enhance effectiveness, communicated and made visible throughout the organization by disseminating communiqués, posters, banners and other forms of informational media.
Consistent with the structure and complexity of the operator's organization, the continual improvement policy may be issued as a stand-alone policy or combined with the safety policy specified in ORG 1.2.1.
ORG 1.2.3 The Operator should have a corporate policy that supports implementation of a non-punitive reporting system in all areas where operations are conducted and specifies:
i) The types of operational behaviors that are unacceptable;
ii) Conditions under which disciplinary action would not apply. (GM)
Documented and Implemented (Conformity)
Documented not Implemented (Observation)
Implemented not Documented (Observation)
Not Documented not Implemented (Observation)
N/A
Auditor Comments:
Refer to the IRM for the definition of Just Culture.
For some operators a non-punitive reporting system might be referred to as an open reporting system. Such reporting systems are typically considered an attribute of a just culture.
Frontline operational personnel are often in the best position to observe and identify operational hazards and conditions that could lead to accidents or incidents. Experience has shown that personnel will not provide information if there is apprehension or fear that such reporting will result in disciplinary action.
Such a policy is typically documented in operations manuals or other controlled documents.
Consistent with the structure and complexity of the operator's organization, the reporting policy may be issued as a stand-alone policy or combined with the safety policy specified in ORG 1.2.1.
To be effective, a policy assures employees that reporting unpremeditated or inadvertent errors does not result in disciplinary or punitive action being taken against the reporter or other individuals involved unless, of course, such errors result from illegal activity, willful misconduct or other egregious actions, as defined by the operator. Also, employees need to be assured that the identity or information leading to the identity, of any employee who reports an error under this policy is never disclosed unless agreed to by the employee or required by law.
The reporting policy encourages and perhaps even provides incentive for individuals to report hazards and operational deficiencies to management. It also assures personnel that their candid input is highly desired and vital to safe and secure operations.
The reporting policy is typically reviewed periodically to ensure continuing relevance to the organization.
ORG 1.3.1 The Operator shall ensure the management system defines the authorities and responsibilities of management and non-management personnel throughout the organization, and specifies:
i) The levels of management with the authority to make decisions that affect the safety and/or security of aircraft operations;
ii) Responsibilities for ensuring operations are conducted in accordance with applicable regulations and standards of the Operator. [SMS] (GM) >
Documented and Implemented (Conformity)
Documented not Implemented (Finding)
Implemented not Documented (Finding)
Not Documented not Implemented (Finding)
N/A
Auditor Comments:
The definition of authorities and responsibilities of management and non-management personnel is an element of the Safety Accountabilities component of the SMS framework.
An effective management system has lines of authority and responsibility that flow from corporate senior management into all operational areas.
Delegation of authority and assignment of responsibility is described and communicated such that it is understood throughout the organization. As a minimum, organization charts or organograms are acceptable means for documenting the structure of a management system.
Management positions critical to operational safety or security may require enhanced job descriptions or terms of reference that reflect specialized requirements inherent in certain key positions. Such specialized requirements would include any delegating of authority exercised by personnel on behalf of an authority (e.g., designated or authorized flight examiner).
Compliance with regulatory requirements, as well as internal policies and procedures, is an essential element of a safe and secure operational environment. The responsibility for ensuring compliance with both regulatory and internal requirements is specified and assigned within the management system. Job descriptions, terms of reference and operating manuals are examples of appropriate locations for documenting management system responsibilities.